PyDFIR / pyDFIRRam
PyDFIRRam is a Python library leveraging Volatility 3 to simplify and enhance memory forensics. It streamlines the research, parsing, and analysis of memory dumps, allowing users to focus on data rather than commands.
☆25Updated 5 months ago
Alternatives and similar repositories for pyDFIRRam:
Users that are interested in pyDFIRRam are comparing it to the libraries listed below
- Powershell Linter☆50Updated last month
- Ansible + Vagrant + Hyper-V + Vulnerable AD 😎☆90Updated 7 months ago
- DFIR project to collect and analyze events in Google Workspace☆12Updated 11 months ago
- Memory mapping profiles for forensic analysis using volatility 2☆47Updated 2 years ago
- Configuration Extractors for Malware☆91Updated last month
- A ProcessMonitor visualization application written in rust.☆179Updated last year
- My personal OT resource list, gather throughout research and internet adventure.☆65Updated 2 weeks ago
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆147Updated last month
- Python tool to check rootkits in Windows kernel☆193Updated last week
- Repository of Yara Rules☆103Updated 3 weeks ago
- ☆105Updated 8 months ago
- Cheat sheet to detect and remove linux kernel rootkit☆51Updated 2 months ago
- APT hub, It help's research to collect information and data on the latest APT activities. It collects data on APT profiles, IOCs(1 yr), a…☆48Updated this week
- ☆133Updated last year
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆32Updated 3 months ago
- Collection of Volatility2 profiles, generated against Linux kernels.☆35Updated last week
- DFIR ORC PARSER PROJECT☆25Updated 2 weeks ago
- A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …☆138Updated 7 months ago
- ☆127Updated last year
- Breizh CTF 2024 - Challenges☆14Updated 9 months ago
- linikatz is a tool to attack AD on UNIX☆144Updated last year
- Collection of codes focused on Linux rootkits☆91Updated last week
- ☆55Updated 5 months ago
- An interactive shell to spoof some LOLBins command line☆184Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆118Updated 11 months ago
- Rules shared by the community from 100 Days of YARA 2024☆84Updated 2 months ago
- Find potential DLL Sideloads on your windows computer☆176Updated 2 months ago
- ☆20Updated last year
- A curated list of awesome LOLBins, GTFO projects, and similar 'Living Off the Land' security resources.☆143Updated 4 months ago